1290 matches found
Wordpress Ajax Store Locator Arbitrary File Download
An arbitrary file download vulnerability exists in Wordpress Ajax Store Locator. The vulnerability is due to a parameter arriving from user input, which is not properly sanitized. A remote attacker might gain access to arbitrary files using a specially crafted request...
Ajax Store Locator <= 1.2 - Arbitrary File Download
The ajax-store-locator WordPress plugin was affected by an Arbitrary File Download security vulnerability...
WordPress Ajax Store Locator 1.2 Arbitrary File Download
WordPress Ajax Store Locator plugin version 1.2 suffers from an arbitrary file download vulnerability. Exploit Title : Wordpress Ajax Store Locator = 1.2 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/ajax-store-locator-wordpress/5293356...
WordPress Ajax Store Locator Plugin 1.2 - Arbitrary File Download
WordPress Ajax Store Locator plugin is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Upgrade the plugin...
WordPress Plugin Ajax Store Locator 1.2 - Arbitrary File Download
Exploit Title : Wordpress Ajax Store Locator = 1.2 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/ajax-store-locator-wordpress/5293356 Software Link : Premium Dork Google: inurl:ajax-store-locator index of ajax-store-locator Date : 2014-12-06...
WordPress Ajax Store Locator 1.2 Arbitrary File Download
Exploit Title : Wordpress Ajax Store Locator = 1.2 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/ajax-store-locator-wordpress/5293356 Software Link : Premium Dork Google: inurl:ajax-store-locator index of ajax-store-locator Date : 2014-12-06...
Cisco IOS LISP ITR DoS (CSCun73782)
The remote Cisco device is potentially affected by an issue related to the handling of certain parameters in Locator/ID Separation Protocol LISP control messages sent to the ingress tunnel router ITR component. A remote, unauthenticated attacker could exploit this issue by sending specially craft...
WordPress Store Locator 2.3-3.11 - SQL Injection
The store-locator WordPress plugin was affected by a SQL Injection security vulnerability...
CVE-2014-7622
The Affinity Mobile ATM Locator aka com.collegemobile.affinity.locator application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Affinity Mobile ATM Locator aka com.collegemobile.affinity.locator application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7622
The Affinity Mobile ATM Locator aka com.collegemobile.affinity.locator application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7622
The CVE-2014-7622 issue affects the Affinity Mobile ATM Locator (com.collegemobile.affinity.locator) Android app, version 1.5. The vulnerability is that the application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive ...
PT-2014-8142
Name of the Vulnerable Software and Affected Versions Affinity Mobile ATM Locator version 1.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL server...
CVE-2014-7622: Undefined Security Weakness
The Affinity Mobile ATM Locator aka com.collegemobile.affinity.locator application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
SQL Injection Vulnerability in 'Yahoo! Contributors Network'
Yahoo! Contributors Network contributor.yahoo.com, the network of authors that generated the contents such as photographs, videos, articles and their knowledge to more than 600 million monthly visitors, was vulnerable to a Time based Blind SQL Injection vulnerability. Behrouz Sadeghipour, a...
CVE-2014-5710
The Cisco Class Locator Fast Lane aka com.tabletkings.mycompany.fastlane.cisco application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5710
The CVE-2014-5710 entry refers to the Cisco Class Locator Fast Lane Android app (package com.tabletkings.mycompany.fastlane.cisco) that does not verify X.509 certificates for SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via crafted certificat...
PT-2014-6695
Name of the Vulnerable Software and Affected Versions Cisco Class Locator Fast Lane affected versions not specified Description The issue concerns the Cisco Class Locator Fast Lane application for Android, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle...
CVE-2014-5710: Undefined Security Weakness
The Cisco Class Locator Fast Lane aka com.tabletkings.mycompany.fastlane.cisco application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...